Zero-Trust DNS and Fqdn Based Traffic Acquisition Using Synthetic IP

2. The method of claim 1, wherein receiving the data traffic and the synthetic IP address is performed using an encrypted tunnel.

3. The method of claim 1, wherein receiving the endpoint identifier for the internet connected endpoint is performed using a side channel ancillary to a channel used for receiving the data traffic and the synthetic IP address.

4. The method of claim 1, wherein providing the response data traffic to the local machine with the response data traffic correlated to the synthetic IP address is performed using an encrypted tunnel.

10. The method of claim 8, further comprising caching the IP address corresponding to the private internet connected endpoint for subsequent communication with zero-trust clients sending the endpoint identifier corresponding to the private internet connected endpoint.

13. The method of claim 12, further comprising the zero-trust client evaluating policy, and wherein the zero-trust client identifying the synthetic IP address is performed as a result of the endpoint identifier meeting a particular condition of the policy.

15. The method of claim 12, wherein sending the endpoint identifier to the zero-trust service comprises sending the endpoint identifier to the zero-trust service on a side channel.

16. The method of claim 12, further comprising the zero-trust client storing a static correlation of endpoint identifiers with synthetic IP address.

19. The computing system of claim 18, further comprising a policy service configured to store and evaluate policy, and wherein the zero-trust client is configured to identify the synthetic IP addresses as a result of endpoint identifiers meeting particular conditions of the policy.

20. The computing system of claim 18, wherein the computing system is coupled to a side channel, different from a channel used to send synthetic IP addresses and data traffic, wherein the side channel is configured for use in sending the endpoint identifiers to the zero-trust service.